9538 matches found
@molgenis-ui/core-ui (>=0.2.2, <=0.5.3), @molgenis/core-ui (0.2.4) +12 more potentially affected by CVE-2021-20087 via jquery-deparam (>=0.1.0, <=0.5.3)
jquery-deparam NPM version =0.1.0, =0.2.2, =0.1.0, =0.0.1, =1.0.1, =1.2.1, =1.4.4, =1.0.0, =1.0.0, =1.2.1, =0.0.6, =0.3.8, =0.17.22 Source cves: CVE-2021-20087 Source advisory: OSV:GHSA-XG68-CHX2-253G...
1tp (>=0.0.1, <=0.11.2), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +2801 more potentially affected by CVE-2021-31597 via xmlhttprequest-ssl (>=1.5.1, <=1.5.5)
xmlhttprequest-ssl NPM version =1.5.1, =0.0.1, =1.0.2, =4.11.25, =0.1.3, =0.0.15, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =0.2.9-dev-10, =0.13.0-alkemio, =0.17.0-alkemio-1 and more Source cves: CVE-2021-31597 Source advisory: OSV:GHSA-72MH-269X-7MH5...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +18068 more potentially affected by CVE-2021-23364 via browserslist (>=4.0.0, <=4.16.4)
browserslist NPM version =4.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0...
swagger-ui-browserify (>=2.1.4-a, <=2.2.3) potentially affected by CVE-2021-20086 via jquery-bbq (1.0.0)
jquery-bbq NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jquery-bbq and may be impacted: - swagger-ui-browserify =2.1.4-a, =2.2.3 Source cves: CVE-2021-20086 Source advisory: OSV:GHSA-7W8J-85WM-6XFQ...
@anothersoftware/lotion-connect (>=0.1.23, <=0.1.24), @beaker/core (>=1.0.0, <=3.0.2) +372 more potentially affected by CVE-2021-23386 via dns-packet (>=3.0.1, <=5.2.1)
dns-packet NPM version =3.0.1, =0.1.23, =1.0.0, =1.0.0, =1.2.2-urlencoded, =2.0.6, =2.0.2, =0.0.1, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =1.0.1, =1.0.1, =2.0.0, =2.2.0 and more Source cves: CVE-2021-23386 Source advisory: OSV:GHSA-3WCQ-X3MQ-6R9P...
aloha-sd (>=1.0.0, <=1.0.7) potentially affected by CVE-2021-23386 via dns-packet (1.1.1)
dns-packet NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dns-packet and may be impacted: - aloha-sd =1.0.0, =1.0.7 Source cves: CVE-2021-23386 Source advisory: OSV:GHSA-3WCQ-X3MQ-6R9P...
0.extends.fc (1.0.65), 0.extends.react (1.0.51) +398 more potentially affected by CVE-2021-23400 via nodemailer (>=6.0.0, <=6.6.0)
nodemailer NPM version =6.0.0, =1.0.49, =0.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.7, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =2.4.4 and more Source cves: CVE-2021-23400 Source advisory: SNYK:JS-NODEMAILER-1296415...
aquamarine-vm (>=0.1.0, <=0.5.2), ashpaper-plus (>=0.5.0, <=0.5.1) +140 more potentially affected by CVE-2021-32629 via cranelift-codegen (>=0.14.0, <=0.72.0)
cranelift-codegen CARGO version =0.14.0, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.2.9, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.26.1, =0.13.2, =0.8.0-alpha1, =0.14.0, =0.14.0, =0.66.0 and more Source cves: CVE-2021-32629 Source advisory: OSV:RUSTSEC-2021-0067...
about-filter (0.1.0), acari-lib (>=0.1.11, <=0.1.12) +467 more potentially affected by unknown CVE via twoway (>=0.1.8, <=0.2.2)
twoway CARGO version =0.1.8, =0.1.11, =0.1.0, =0.9.2, =0.1.0, =0.4.0-beta.1, =0.1.0-beta.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =0.1.18 - akibisuto-stylus 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0146...
@anothersoftware/lotion-connect (>=0.1.23, <=0.1.24), @beaker/core (>=1.0.0, <=3.0.2) +372 more potentially affected by CVE-2021-23386 via dns-packet (>=3.0.1, <=5.2.1)
dns-packet NPM version =3.0.1, =0.1.23, =1.0.0, =1.0.0, =1.2.2-urlencoded, =2.0.6, =2.0.2, =0.0.1, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =1.0.1, =1.0.1, =2.0.0, =2.2.0 and more Source cves: CVE-2021-23386 Source advisory: SNYK:JS-DNSPACKET-1293563...
2bsafe-api (>=1.0.1, <=1.0.2), 3architecture (>=1.0.0, <=1.7.0) +2315 more potentially affected by CVE-2020-7765 via @firebase/util (>=0.1.4, <=0.3.3-2020926155854)
@firebase/util NPM version =0.1.4, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.1, =1.0.24, =0.65.0, =0.53.0, =0.50.0, =1.0.1, =0.0.2, =0.0.1, =0.1.0 and more Source cves: CVE-2020-7765 Source advisory: OSV:GHSA-FPM5-VV97-JFWG...
@shoplo/kit-vue (>=1.17.0, <=1.22.16), dm-cli (>=0.4.1-0, <=0.4.5) potentially affected by CVE-2020-7680 via docsify (>=4.2.1, <=4.9.1)
docsify NPM version =4.2.1, =1.17.0, =0.4.1-0, =0.4.5 Source cves: CVE-2020-7680 Source advisory: OSV:GHSA-QPQH-46QJ-VWCW...
@applicaster/zapp-react-native-fast-image (>=1.0.0, <=1.1.0-beta.0), @momo-platform/component-kits (1.1.74) +5 more potentially affected by CVE-2020-7696 via react-native-fast-image (>=8.1.2, <=8.2.0)
react-native-fast-image NPM version =8.1.2, =1.0.0, =0.0.1, =0.1.0, =1.2.23 Source cves: CVE-2020-7696 Source advisory: OSV:GHSA-6XHG-Q9C8-RJ32...
rollup.config.flow (4.0.0), tslib-cli (>=1.0.0, <=5.4.1) potentially affected by CVE-2020-7684 via rollup-plugin-serve (1.0.1)
rollup-plugin-serve NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on rollup-plugin-serve and may be impacted: - rollup.config.flow 4.0.0 - tslib-cli =1.0.0, =5.4.1 Source cves: CVE-2020-7684 Source advisory: OSV:GHSA-4J46-MP85-MV8C...
@ardier16/node-lb (>=1.0.0, <=2.0.0), @economist/backstopjs (>=0.0.1, <=0.0.3) +138 more potentially affected by CVE-2020-7679 via casperjs (>=1.1.0-beta3, <=1.1.4)
casperjs NPM version =1.1.0-beta3, =1.0.0, =0.0.1, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =1.2.0, =0.4.0, =0.1.0, =0.0.2, =3.40.4-ez-bin.7, =0.0.1, =0.0.2, =0.0.3 - autocallinjs 1.0.0 and more Source cves: CVE-2020-7679 Source advisory: OSV:GHSA-VRR3-5R3V-7XFW...
cd-core (>=0.0.3, <=0.0.11) potentially affected by CVE-2020-7675 via cd-messenger (2.7.12)
cd-messenger NPM version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on cd-messenger and may be impacted: - cd-core =0.0.3, =0.0.11 Source cves: CVE-2020-7675 Source advisory: OSV:GHSA-V756-4WHV-48VC...
@igames/ghost (>=3.41.6, <=4.0.0-alpha.2), @loftysoul/soul (>=3.0.3-1-soul, <=3.0.16-soul) +8 more potentially affected by CVE-2021-32817 via express-hbs (>=2.0.2, <=2.3.5)
express-hbs NPM version =2.0.2, =3.41.6, =3.0.3-1-soul, =3.0.7, =4.0.4, =1.26.1, =3.17.1, =3.2.1, =0.0.4, =0.1.1-alpha.0 - sign-alex 1.0.1 Source cves: CVE-2021-32817 Source advisory: OSV:GHSA-RWXP-HWWF-653V...
@27works/posto (2.0.2), @lluis/codo (>=2.1.2, <=2.1.3) +70 more potentially affected by CVE-2021-32818 via haml-coffee (>=1.4.1, <=1.14.1)
haml-coffee NPM version =1.4.1, =2.1.2, =0.0.2, =2.1.3, =0.0.1, =0.0.1, =0.2.0, =0.2.0, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-32818 Source advisory: OSV:GHSA-M7MF-VM62-7X3Q...
101 (>=0.2.0, <=1.6.2), 101-es6 (0.8.0) +306 more potentially affected by CVE-2021-25943 via 101 (>=1.2.0, <=1.6.3)
101 NPM version =1.2.0, =0.2.0, =0.1.0, =0.0.0, =0.0.2, =2.13.1, =0.0.1, =0.0.2, =0.1.0, =1.0.0, =1.1.2, =0.0.1, =1.0.0, =0.0.48, =0.0.62 and more Source cves: CVE-2021-25943 Source advisory: OSV:GHSA-CWCX-RXGC-CMW3...
@tucows/donejs-carousel-plugin (>=0.1.0, <=3.3.0), @tucows/tucows-carousel-plugin (>=0.1.0, <=0.2.0) +22 more potentially affected by CVE-2021-23429 via transpile (>=0.9.7, <=2.8.0)
transpile NPM version =0.9.7, =0.1.0, =0.1.0, =0.0.1, =0.0.1-0, =1.0.0, =0.5.0, =0.3.0-beta.0, =5.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2021-23429 Source advisory: SNYK:JS-TRANSPILE-1290774...